Back to CVE records
High 8.4Known exploited (CISA KEV)Published Dec 5, 2023
CVE-2023-33107Integer Overflow or Wraparound in Graphics Linux
Updated under an hour ago ()
Does this affect you?
It affects Qualcomm, Inc. Snapdragon and 59 other products. Add what you run to find out whether that includes you.
CISA lists it as known exploited since Dec 5, 2023; federal agencies had to remediate by Dec 26, 2023. Treat that date as your deadline.
Do this next
Start free and add your stack
Free account, 1 product
Memory corruption in Graphics Linux while assigning shared virtual memory region during IOCTL call.
- CVSS
- 8.4 HIGH (v3.1, CNA)CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Weakness (CWE)
- CWE-190
- Known exploited
- Added to CISA KEV Dec 5, 2023; federal remediation due Dec 26, 2023Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.
- EPSS (exploitation in the next 30 days)
- 0.74% (percentile 54)
- Assigned by
- qualcomm
- NVD analysis
- Analyzed
- Record last updated
- Oct 21, 2025
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Qualcomm, Inc. Snapdragon qualcomm:snapdragon (from the name) | 315 5G IoT Modem; APQ8017; APQ8064AU; AQT1000; AR8031; AR8035; C-V2X 9150; CSRA6620; and 193 more ranges | CNA record |
qualcomm 315_5g_iot_modem_firmware qualcomm:315_5g_iot_modem_firmware | all versions | CISA ADP |
qualcomm apq8017_firmware qualcomm:apq8017_firmware | all versions | CISA ADP |
qualcomm apq8064au_firmware qualcomm:apq8064au_firmware | all versions | CISA ADP |
qualcomm aqt1000_firmware qualcomm:aqt1000_firmware | all versions | CISA ADP |
qualcomm ar8031_firmware qualcomm:ar8031_firmware | all versions | CISA ADP |
qualcomm ar8035_firmware qualcomm:ar8035_firmware | all versions | CISA ADP |
qualcomm c-v2x_9150_firmware qualcomm:c-v2x_9150_firmware | all versions | CISA ADP |
qualcomm csra6620_firmware qualcomm:csra6620_firmware | all versions | CISA ADP |
qualcomm csra6640_firmware qualcomm:csra6640_firmware | all versions | CISA ADP |
qualcomm csrb31024_firmware qualcomm:csrb31024_firmware | all versions | CISA ADP |
qualcomm fastconnect_6200_firmware qualcomm:fastconnect_6200_firmware | all versions | CISA ADP |
qualcomm fastconnect_6700_firmware qualcomm:fastconnect_6700_firmware | all versions | CISA ADP |
qualcomm fastconnect_6800_firmware qualcomm:fastconnect_6800_firmware | all versions | CISA ADP |
qualcomm fastconnect_6900_firmware qualcomm:fastconnect_6900_firmware | all versions | CISA ADP |
qualcomm fastconnect_7800_firmware qualcomm:fastconnect_7800_firmware | all versions | CISA ADP |
qualcomm flight_rb5_5g_platform_firmware qualcomm:flight_rb5_5g_platform_firmware | all versions | CISA ADP |
qualcomm mdm9250_firmware qualcomm:mdm9250_firmware | all versions | CISA ADP |
qualcomm mdm9650_firmware qualcomm:mdm9650_firmware | all versions | CISA ADP |
qualcomm msm8108_firmware qualcomm:msm8108_firmware | all versions | CISA ADP |
qualcomm msm8209_firmware qualcomm:msm8209_firmware | all versions | CISA ADP |
qualcomm msm8608_firmware qualcomm:msm8608_firmware | all versions | CISA ADP |
qualcomm msm8909w_firmware qualcomm:msm8909w_firmware | all versions | CISA ADP |
qualcomm msm8996au_firmware qualcomm:msm8996au_firmware | all versions | CISA ADP |
qualcomm qam8255p_firmware qualcomm:qam8255p_firmware | all versions | CISA ADP |
qualcomm qam8295p_firmware qualcomm:qam8295p_firmware | all versions | CISA ADP |
qualcomm qam8650p_firmware qualcomm:qam8650p_firmware | all versions | CISA ADP |
qualcomm qam8775p_firmware qualcomm:qam8775p_firmware | all versions | CISA ADP |
qualcomm qca6174a_firmware qualcomm:qca6174a_firmware | all versions | CISA ADP |
qualcomm qca6310_firmware qualcomm:qca6310_firmware | all versions | CISA ADP |
qualcomm qca6320_firmware qualcomm:qca6320_firmware | all versions | CISA ADP |
qualcomm qca6335_firmware qualcomm:qca6335_firmware | all versions | CISA ADP |
qualcomm qca6391_firmware qualcomm:qca6391_firmware | all versions | CISA ADP |
qualcomm qca6420_firmware qualcomm:qca6420_firmware | all versions | CISA ADP |
qualcomm qca6421_firmware qualcomm:qca6421_firmware | all versions | CISA ADP |
qualcomm qca6426_firmware qualcomm:qca6426_firmware | all versions | CISA ADP |
qualcomm qca6430_firmware qualcomm:qca6430_firmware | all versions | CISA ADP |
qualcomm qca6431_firmware qualcomm:qca6431_firmware | all versions | CISA ADP |
qualcomm qca6436_firmware qualcomm:qca6436_firmware | all versions | CISA ADP |
qualcomm qca6564_firmware qualcomm:qca6564_firmware | all versions | CISA ADP |
qualcomm qca6564a_firmware qualcomm:qca6564a_firmware | all versions | CISA ADP |
qualcomm qca6564au_firmware qualcomm:qca6564au_firmware | all versions | CISA ADP |
qualcomm qca6574_firmware qualcomm:qca6574_firmware | all versions | CISA ADP |
qualcomm qca6574a_firmware qualcomm:qca6574a_firmware | all versions | CISA ADP |
qualcomm qca6574au_firmware qualcomm:qca6574au_firmware | all versions | CISA ADP |
qualcomm qca6595_firmware qualcomm:qca6595_firmware | all versions | CISA ADP |
qualcomm qca6595au_firmware qualcomm:qca6595au_firmware | all versions | CISA ADP |
qualcomm qca6696_firmware qualcomm:qca6696_firmware | all versions | CISA ADP |
qualcomm qca6698aq_firmware qualcomm:qca6698aq_firmware | all versions | CISA ADP |
qualcomm qca6797aq_firmware qualcomm:qca6797aq_firmware | all versions | CISA ADP |
qualcomm qca8081_firmware qualcomm:qca8081_firmware | all versions | CISA ADP |
qualcomm qca8337_firmware qualcomm:qca8337_firmware | all versions | CISA ADP |
qualcomm qca9377_firmware qualcomm:qca9377_firmware | all versions | CISA ADP |
qualcomm qcm2290_firmware qualcomm:qcm2290_firmware | all versions | CISA ADP |
qualcomm qcm4290_firmware qualcomm:qcm4290_firmware | all versions | CISA ADP |
qualcomm qcm4325_firmware qualcomm:qcm4325_firmware | all versions | CISA ADP |
qualcomm qcm4490_firmware qualcomm:qcm4490_firmware | all versions | CISA ADP |
qualcomm qcm5430_firmware qualcomm:qcm5430_firmware | all versions | CISA ADP |
qualcomm qcm6125_firmware qualcomm:qcm6125_firmware | all versions | CISA ADP |
qualcomm qcm6490_firmware qualcomm:qcm6490_firmware | all versions | CISA ADP |
References
- https://www.qualcomm.com/company/product-security/bulletins/december-2023-bulletinpatch, vendor-advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-33107us-government-resource
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.